Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/A5D6438038C011ED8D00366CC4F9AE02.roa
File:                     A5D6438038C011ED8D00366CC4F9AE02.roa (raw, json)
Hash identifier:          V/czw6DO+AdnOyiJnSDUX4sGfKmyc6Hc7wsA62pSxko=
Subject key identifier:   F5:54:E9:7E:E0:00:24:89:E1:FF:A1:FD:FF:86:B1:DA:3E:CC:A8:E4
Certificate issuer:       /CN=A91BF849/serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55
Certificate serial:       02FE
Authority key identifier: 80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/A5D6438038C011ED8D00366CC4F9AE02.roa
Signing time:             Thu 13 Aug 2026 00:51:25 +0000
ROA not before:           Thu 13 Aug 2026 00:51:25 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     135549
IP address blocks:        103.65.184.0/22 maxlen: 22
                          103.65.184.0/23 maxlen: 23
                          103.65.184.0/24 maxlen: 24
                          103.65.185.0/24 maxlen: 24
                          103.65.186.0/23 maxlen: 23
                          103.65.186.0/24 maxlen: 24
                          103.65.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl
                          rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:44:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 766 (0x2fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF849, serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55
        Validity
            Not Before: Aug 13 00:51:25 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a7d150d-cbee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2f:79:01:50:98:6a:7f:f7:f1:76:3c:29:31:
                    e9:c6:c9:e1:a4:8f:bc:ee:62:bc:58:51:ca:2c:70:
                    d6:97:7b:52:74:a4:df:ff:ca:ee:b0:9e:56:60:98:
                    ad:2a:03:64:49:79:51:63:10:49:76:ee:77:cc:69:
                    9e:0d:d4:89:3a:0b:e8:76:96:ba:4e:38:47:1c:c3:
                    6a:fc:18:90:4c:c8:03:84:4b:95:81:b3:04:46:58:
                    a0:8e:3b:79:74:86:4b:8c:ba:4e:c4:a9:06:97:35:
                    8d:98:fa:94:09:45:94:43:a4:79:4d:43:0a:f5:be:
                    b0:c3:1c:dd:6a:0f:8b:14:2a:8c:2b:67:37:d0:db:
                    90:45:57:35:ef:5d:95:e8:6c:7f:ae:80:84:8f:7f:
                    ef:41:e5:e7:eb:f4:48:c4:7f:7b:44:df:a4:4f:88:
                    a5:25:85:e3:46:c1:17:14:fc:77:d2:f8:01:5c:61:
                    1e:1a:7c:93:14:8b:b2:46:cd:ee:48:7a:8b:e7:5f:
                    5d:01:07:93:c1:1f:9a:75:4c:0b:85:40:fa:6b:b7:
                    9b:ba:ec:5e:f4:ab:7a:a0:17:9b:de:b0:24:6e:d6:
                    81:15:25:a6:62:21:53:57:8a:6d:ab:06:11:bc:8f:
                    73:c7:91:78:5f:cc:8e:21:ac:40:b9:78:b2:87:bf:
                    00:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:54:E9:7E:E0:00:24:89:E1:FF:A1:FD:FF:86:B1:DA:3E:CC:A8:E4
            X509v3 Authority Key Identifier:
                keyid:80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/A5D6438038C011ED8D00366CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:70:f7:ba:99:bf:5c:a7:0c:67:55:5c:52:d6:5e:3b:48:22:
         1d:be:41:c8:bf:f2:61:b7:b1:ec:cf:25:4c:cf:93:52:a1:4e:
         28:20:46:c5:4c:e7:ff:b0:64:bd:21:cb:1a:6d:1e:67:87:2f:
         6b:68:7d:a6:83:1b:16:da:ad:89:47:00:29:13:ce:62:fa:1c:
         19:2e:8a:4a:44:54:88:de:e6:7d:a0:f4:2b:ef:1e:1e:8b:a4:
         41:3c:b0:69:5e:0b:63:3a:bf:86:52:9c:f2:9f:b8:2f:19:76:
         ee:17:02:5b:5a:fe:f4:3c:90:eb:9a:18:80:11:a4:20:cb:c3:
         29:91:71:80:fa:02:3d:30:1f:01:76:78:eb:43:83:74:79:2b:
         94:c9:57:eb:e7:58:ef:5a:43:74:06:22:85:63:df:3c:60:36:
         38:4d:93:8f:ce:e2:6a:07:c5:c4:fe:e9:e9:c7:08:61:3a:c3:
         a7:99:5a:f7:71:5c:2d:2d:d5:0b:f4:00:86:85:eb:5e:67:af:
         a4:03:44:a1:13:60:8d:39:7a:0e:22:57:0c:99:e8:6b:75:ad:
         45:6a:91:71:08:30:19:03:97:58:87:35:01:a3:22:1c:ea:c0:
         5c:74:b4:5f:43:76:f9:43:0b:32:31:7a:d0:9a:5c:24:dd:63:
         41:65:f5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:52:46 2026 by rpki-client